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(54) SECURITY MANAGEMENT DEVICE IN OPEN DECENTRALIZED ENVIRONMENT 

(57)Abstract 

PURPOSE: To surely realize security management among domains 
(network system) A, B, and C having different kinds of equipment in a 
system in open decentralized environment 

CONSTITUTION: At an optional position in a network, a TTP (reliable 3rd 
party) for security management covering plural domains is provided, and 
a security policy setting and modifying means for the whole network 
NW1 and an access control decision means which controls and decide 
access covering plural domains according to the security policy are 
provided there. When there is requests to register security policies PA 
and PB from the domains A and B (managers MA and MB) (1), the TTB 
compares PA and PB from points of view of regulations of OSI such as 
certification, access control, and secrecy and absorbs differences in 
expression by mapping generate a security policy P which has no 
contradiction on the whole. On the basis of P, various security 
management such as access permission/inhibition decision making is 
performed. 
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